1. Why is confidence in the information you act on important? What could happen if a private organization acted on threat intelligence that was inaccurate? What could happen if the military acted on faulty information?

2. Why are Zero Day vulnerabilities so difficult to defend against? Is there anything that can be done to defend against a Zero Day? if so, what?

3. What made the MITRE ATT&CK Framework different that another frameworks for analyzing threats? While thinking about this question and ATT&CK is knowing adversary tactics better than simply securing with best practice hardening guides? Why or why not?

4. Why are there so many frameworks for evaluating attackers and threats? Is one framework better than the other? Why or why not?

ENGINEERING & TECHNOLOGY

COMPUTER SCIENCE

ENC 2323